Re: [foxboro] PI connection type
- From: <Jack.Easley@xxxxxxxxxxxx>
- To: <foxboro@xxxxxxxxxxxxx>
- Date: Thu, 25 Mar 2010 15:43:10 -0500
This Security Risk with PI Writes has always been a concern for a
Control Freak (more Control oriented than IT oriented) like me. We no
longer have this issue as we use Foxboro Isolation Stations that
eliminate this possibility, but I honestly can't recommend them for the
added layers of complexity and undependability they introduce with data
transfer to and from the MESH.
You are correct that if you allow any PI writes, anything can be written
to the Foxboro and a simple PI configuration typo, or the Bad Actor
scenario, can bring you down.
Look! I trimmed by response. Aren't I somthin?
Jack Easley
Sr. I&C Technician
Luminant Power, Martin Lake Plant
Phone 903.836.6273
jack.easley@xxxxxxxxxxxx
-----Original Message-----
From: foxboro-bounce@xxxxxxxxxxxxx [mailto:foxboro-bounce@xxxxxxxxxxxxx]
On Behalf Of G.Macdonald@xxxxxxxxx
Sent: Thursday, March 25, 2010 1:01 PM
To: foxboro@xxxxxxxxxxxxx
Subject: Re: [foxboro] PI connection type
Tim,
Are you restricting which points PI can write down to on the DCS from
within the DCS? I am concerned of the security risk of a compromised PI
server (it is on the corporate network), or mistakenly configuring a
point to write to critical points on the DCS. I have found a blurb in
the FoxAPI documents, but haven't had any luck getting it to work.
To answer further to you comments below, I have configured them as
buffered writes (location2 is not 0). Yes location3=-3 for the AIN's
I'm writing to. Yes, I have been starting / stopping the interface after
making a change.
Thanks,
Grant.
Confidentiality Notice: This email message, including any attachments,
contains or may contain confidential information intended only for the
addressee. If you are not an intended recipient of this message, be
advised that any reading, dissemination, forwarding, printing, copying
or other use of this message or its attachments is strictly prohibited. If
you have received this message in error, please notify the sender
immediately by reply message and delete this email message and any
attachments from your system.
_______________________________________________________________________
This mailing list is neither sponsored nor endorsed by Invensys Process
Systems (formerly The Foxboro Company). Use the info you obtain here at
your own risks. Read http://www.thecassandraproject.org/disclaimer.html
foxboro mailing list: //www.freelists.org/list/foxboro
to subscribe: mailto:foxboro-request@xxxxxxxxxxxxx?subject=join
to unsubscribe: mailto:foxboro-request@xxxxxxxxxxxxx?subject=leave
Other related posts:
